10 | {children}
11 |
12 | );
13 | }
14 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/components/store/index.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * Store Components
3 | *
4 | * Components for store discovery and item browsing.
5 | */
6 |
7 | // Main components
8 | export { StoreDiscovery } from "./store-discovery";
9 |
10 | // Item components
11 | export type {
12 | MCPRegistryServer,
13 | MCPRegistryServerIcon,
14 | MCPRegistryServerMeta,
15 | } from "./registry-item-card";
16 |
--------------------------------------------------------------------------------
/apps/docs/client/src/components/ui/AccordionGroup.tsx:
--------------------------------------------------------------------------------
1 | import React from "react";
2 |
3 | interface AccordionGroupProps {
4 | children: React.ReactNode;
5 | }
6 |
7 | export function AccordionGroup({ children }: AccordionGroupProps) {
8 | return (
9 |
10 | {children}
11 |
12 | );
13 | }
14 |
--------------------------------------------------------------------------------
/packages/runtime/src/mcp.ts:
--------------------------------------------------------------------------------
1 | /* oxlint-disable no-explicit-any */
2 | import type { ToolBinder } from "@decocms/bindings";
3 | export {
4 | createMCPFetchStub,
5 | MCPClient,
6 | type CreateStubAPIOptions,
7 | type MCPClientFetchStub,
8 | type MCPClientStub,
9 | } from "@decocms/bindings/client"; // Default fetcher instance with API_SERVER_URL and API_HEADERS
10 |
11 | export type { ToolBinder };
12 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/utils/slugify.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * Convert a string to a URL-friendly slug
3 | * Removes special characters, converts to lowercase, and replaces spaces with hyphens
4 | */
5 | export function slugify(input: string): string {
6 | return input
7 | .toLowerCase()
8 | .trim()
9 | .replace(/[^a-z0-9\s_-]+/g, "")
10 | .replace(/[\s_-]+/g, "-")
11 | .replace(/^-+|-+$/g, "");
12 | }
13 |
--------------------------------------------------------------------------------
/packages/vite-plugin-deco/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "@decocms/vite-plugin",
3 | "version": "1.0.0-alpha.1",
4 | "type": "module",
5 | "exports": {
6 | ".": "./index.ts"
7 | },
8 | "scripts": {
9 | "check": "tsc --noEmit"
10 | },
11 | "dependencies": {
12 | "vite": "^7.2.1",
13 | "@cloudflare/vite-plugin": "^1.13.4"
14 | },
15 | "publishConfig": {
16 | "access": "public"
17 | }
18 | }
19 |
--------------------------------------------------------------------------------
/apps/docs/client/src/content.config.ts:
--------------------------------------------------------------------------------
1 | import { defineCollection, z } from "astro:content";
2 | import { glob } from "astro/loaders";
3 |
4 | export const collections = {
5 | docs: defineCollection({
6 | loader: glob({ pattern: "**/*.mdx", base: "./src/content" }),
7 | schema: z.object({
8 | title: z.string(),
9 | description: z.string(),
10 | icon: z.string().optional(),
11 | }),
12 | }),
13 | };
14 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/hooks/use-deco-chat-open.ts:
--------------------------------------------------------------------------------
1 | import { useLocalStorage } from "@/web/hooks/use-local-storage";
2 | import { LOCALSTORAGE_KEYS } from "@/web/lib/localstorage-keys";
3 |
4 | export function useDecoChatOpen() {
5 | const [open, setOpenStorage] = useLocalStorage
14 |
16 | );
17 | }
18 |
--------------------------------------------------------------------------------
/packages/runtime/src/asset-server/dev-server-proxy.ts:
--------------------------------------------------------------------------------
1 | import { proxy } from "hono/proxy";
2 | import { Context } from "hono";
3 |
4 | export const devServerProxy = (url: string | URL) => (c: Context) => {
5 | const incomingUrl = new URL(c.req.raw.url);
6 | const target = new URL(url);
7 | target.pathname = incomingUrl.pathname;
8 | target.search = incomingUrl.search;
9 |
10 | return proxy(target, {
11 | raw: c.req.raw,
12 | headers: {
13 | ...c.req.raw.headers,
14 | },
15 | });
16 | };
17 |
--------------------------------------------------------------------------------
/apps/docs/client/src/config/site.ts:
--------------------------------------------------------------------------------
1 | export const siteConfig = {
2 | name: "Deco MCP Documentation",
3 | description: "Documentation for Deco MCP server with tools and workflows",
4 | url: "https://your-domain.com",
5 | ogImage: "https://your-domain.com/og.jpg",
6 | links: {
7 | github: "https://github.com/deco-cx/chat",
8 | },
9 | // GitHub repository URL for edit links
10 | githubRepo: "https://github.com/deco-cx/chat",
11 | // GitHub branch name (usually 'main' or 'master')
12 | githubBranch: "main",
13 | } as const;
14 |
--------------------------------------------------------------------------------
/apps/mesh/.gitignore:
--------------------------------------------------------------------------------
1 | # Auth configuration (contains secrets)
2 | auth-config.json
3 |
4 | # Database files
5 | data/
6 | *.db
7 | *.sqlite
8 | *.db-shm
9 | *.db-wal
10 |
11 | # Dependencies
12 | node_modules/
13 |
14 | # Build outputs
15 | dist/
16 | build/
17 |
18 | # Environment
19 | .env
20 | .env.local
21 | .env.*.local
22 |
23 | # IDE
24 | .vscode/
25 | .idea/
26 |
27 | # OS
28 | .DS_Store
29 | Thumbs.db
30 |
31 | # Logs
32 | *.log
33 | logs/
34 |
35 | # Test coverage
36 | coverage/
37 |
38 | # Temporary files
39 | /tmp/
40 |
41 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/components/details/connection/tools-tab.tsx:
--------------------------------------------------------------------------------
1 | import { ToolsList } from "@/web/components/tools";
2 |
3 | interface ToolsTabProps {
4 | tools:
5 | | Array<{
6 | name: string;
7 | description?: string;
8 | inputSchema?: Record
11 | {/* Connecting line */}
12 |
13 |
14 | {/* Steps container */}
15 |
17 | );
18 | }
19 |
--------------------------------------------------------------------------------
/apps/mesh/src/auth/roles.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * Built-in Role Definitions
3 | *
4 | * Separated to avoid circular dependencies between auth and context-factory modules.
5 | */
6 |
7 | /**
8 | * Built-in roles that have full access (owner, admin, user)
9 | * These bypass custom permission checks
10 | */
11 | export const BUILTIN_ROLES = ["owner", "admin", "user"] as const;
12 |
13 | export type BuiltinRole = (typeof BUILTIN_ROLES)[number];
14 |
15 | /**
16 | * Roles that have admin privileges
17 | */
18 | export const ADMIN_ROLES: BuiltinRole[] = ["owner", "admin"];
19 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/eventbus/index.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * Event Bus Tools
3 | *
4 | * MCP tools for publishing events and managing subscriptions.
5 | */
6 |
7 | export { EVENT_PUBLISH } from "./publish";
8 | export { EVENT_SUBSCRIBE } from "./subscribe";
9 | export { EVENT_UNSUBSCRIBE } from "./unsubscribe";
10 | export { EVENT_CANCEL } from "./cancel";
11 | export { EVENT_ACK } from "./ack";
12 | export { EVENT_SUBSCRIPTION_LIST } from "./list";
13 | export { EVENT_SYNC_SUBSCRIPTIONS } from "./sync-subscriptions";
14 |
15 | // Re-export schemas
16 | export * from "./schema";
17 |
--------------------------------------------------------------------------------
/packages/runtime/src/state.ts:
--------------------------------------------------------------------------------
1 | import { AsyncLocalStorage } from "node:async_hooks";
2 | import { DefaultEnv } from "./index.ts";
3 | import type { AppContext } from "./tools.ts";
4 |
5 | const asyncLocalStorage = new AsyncLocalStorage{children}
16 |
7 |
24 |
--------------------------------------------------------------------------------
/apps/mesh/migrations/011-gateway-icon.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * Add icon field to gateways table
3 | *
4 | * Allows gateways to have a custom icon, typically inherited from the connection
5 | * when created via "Expose via Gateway" feature.
6 | */
7 |
8 | import type { Kysely } from "kysely";
9 |
10 | export async function up(db: Kysely
8 | 
15 | {
16 | title && (
17 |
23 |
18 |
20 | )
21 | }
22 | {title}
19 |
10 |
20 | );
21 | }
22 |
--------------------------------------------------------------------------------
/packages/runtime/src/bindings/utils.ts:
--------------------------------------------------------------------------------
1 | import type { ToolBinder } from "../mcp.ts";
2 |
3 | export const Binding =
11 |
18 |
19 |
13 | {/* Numbered badge */}
14 |
29 | );
30 | }
31 |
--------------------------------------------------------------------------------
/apps/mesh/migrations/002-organization-settings.ts:
--------------------------------------------------------------------------------
1 | import { Kysely, sql } from "kysely";
2 |
3 | export async function up(db: Kysely
15 | {number}
16 |
17 |
18 | {/* Content area */}
19 |
20 | {/* Title */}
21 |
28 |
22 | {title}
23 |
24 |
25 | {/* Content */}
26 | {children}
27 | Click here to login
`, 30 | }); 31 | }, 32 | }; 33 | }; 34 | 35 | export interface MagicLinkConfig { 36 | enabled: boolean; 37 | emailProviderId: string; 38 | } 39 | -------------------------------------------------------------------------------- /apps/mesh/auth-config.example.json: -------------------------------------------------------------------------------- 1 | { 2 | "emailAndPassword": { 3 | "enabled": true 4 | }, 5 | "socialProviders": { 6 | "google": { 7 | "clientId": "your-google-client-id", 8 | "clientSecret": "your-google-client-secret" 9 | }, 10 | "github": { 11 | "clientId": "your-github-client-id", 12 | "clientSecret": "your-github-client-secret" 13 | } 14 | }, 15 | "saml": { 16 | "enabled": false, 17 | "providers": [] 18 | }, 19 | "emailProviders": [ 20 | { 21 | "id": "resend-primary", 22 | "provider": "resend", 23 | "config": { 24 | "apiKey": "your-resend-api-key", 25 | "fromEmail": "noreply@yourdomain.com" 26 | } 27 | }, 28 | { 29 | "id": "sendgrid-primary", 30 | "provider": "sendgrid", 31 | "config": { 32 | "apiKey": "your-sendgrid-api-key", 33 | "fromEmail": "noreply@yourdomain.com" 34 | } 35 | } 36 | ], 37 | "inviteEmailProviderId": "resend-primary", 38 | "magicLinkConfig": { 39 | "enabled": true, 40 | "emailProviderId": "resend-primary" 41 | } 42 | } 43 | -------------------------------------------------------------------------------- /packages/ui/src/components/input.tsx: -------------------------------------------------------------------------------- 1 | import type * as React from "react"; 2 | 3 | import { cn } from "@deco/ui/lib/utils.ts"; 4 | 5 | function Input({ className, type, ...props }: React.ComponentProps<"input">) { 6 | return ( 7 | 18 | ); 19 | } 20 | 21 | export { Input }; 22 | -------------------------------------------------------------------------------- /apps/mesh/migrations/005-connection-configuration.ts: -------------------------------------------------------------------------------- 1 | /** 2 | * Connection Configuration Migration 3 | * 4 | * Adds configuration state and scopes to connections table. 5 | * This allows MCPs to declare their configuration needs via MESH_CONFIGURATION tool. 6 | */ 7 | 8 | import { Kysely } from "kysely"; 9 | 10 | export async function up(db: Kysely
24 | {avatar && (
25 | 
30 | )}
31 | {title && (
32 |
40 | );
41 | }
42 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/connection/get.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * COLLECTION_CONNECTIONS_GET Tool
3 | *
4 | * Get connection details by ID with collection binding compliance.
5 | */
6 |
7 | import {
8 | CollectionGetInputSchema,
9 | createCollectionGetOutputSchema,
10 | } from "@decocms/bindings/collections";
11 | import { defineTool } from "../../core/define-tool";
12 | import { ConnectionEntitySchema } from "./schema";
13 |
14 | /**
15 | * Output schema using the ConnectionEntitySchema
16 | */
17 | const ConnectionGetOutputSchema = createCollectionGetOutputSchema(
18 | ConnectionEntitySchema,
19 | );
20 |
21 | export const COLLECTION_CONNECTIONS_GET = defineTool({
22 | name: "COLLECTION_CONNECTIONS_GET",
23 | description: "Get connection details by ID",
24 |
25 | inputSchema: CollectionGetInputSchema,
26 | outputSchema: ConnectionGetOutputSchema,
27 |
28 | handler: async (input, ctx) => {
29 | // Check authorization
30 | await ctx.access.check();
31 |
32 | // Get connection
33 | const connection = await ctx.storage.connections.findById(input.id);
34 |
35 | if (!connection) {
36 | return { item: null };
37 | }
38 |
39 | return {
40 | item: connection,
41 | };
42 | },
43 | });
44 |
--------------------------------------------------------------------------------
/packages/ui/src/components/sidebar-footer-shell.tsx:
--------------------------------------------------------------------------------
1 | import {
2 | SidebarFooter as SidebarFooterInner,
3 | SidebarMenu,
4 | SidebarMenuItem,
5 | } from "./sidebar.tsx";
6 | import { cn } from "../lib/utils.ts";
7 | import type { ReactNode } from "react";
8 |
9 | interface SidebarFooterShellProps {
10 | children: ReactNode;
11 | className?: string;
12 | }
13 |
14 | export function SidebarFooterShell({
15 | children,
16 | className,
17 | }: SidebarFooterShellProps) {
18 | return (
19 | {title}
33 | )} 34 | {description && ( 35 |
36 | {description}
37 |
38 | )}
39 |
34 |
35 |
36 |
19 | {/* Breadcrumb Section */}
20 | {breadcrumb && (
21 |
41 | );
42 | }
43 |
--------------------------------------------------------------------------------
/apps/mesh/migrations/013-monitoring-user-agent-gateway.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * Add user_agent and gateway_id fields to monitoring_logs table
3 | *
4 | * - user_agent: Captures the x-mesh-client header for client identification
5 | * - gateway_id: Links logs to the gateway used (if applicable)
6 | */
7 |
8 | import type { Kysely } from "kysely";
9 |
10 | export async function up(db: Kysely{breadcrumb}
22 | )}
23 |
24 | {/* Title Section with Copy Button */}
25 |
26 |
31 |
32 | {/* Description Section */}
33 | {description && (
34 | 27 | {title} 28 |
29 |
35 |
39 | )}
40 | 36 | {description} 37 |
38 |{members.length} members
;
30 | * }
31 | * ```
32 | */
33 | export function useMembers() {
34 | const { locator } = useProjectContext();
35 |
36 | return useSuspenseQuery({
37 | queryKey: KEYS.members(locator),
38 | queryFn: () => authClient.organization.listMembers(),
39 | });
40 | }
41 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/lib/locator.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * a ProjectLocator is a github-like slug string that identifies a project in an organization.
3 | *
4 | * format:
21 |
36 | {isOpen && (
37 |
42 | );
43 | }
44 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/eventbus/list.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * EVENT_SUBSCRIPTION_LIST Tool
3 | *
4 | * Lists subscriptions, optionally filtered by connection ID.
5 | */
6 |
7 | import { defineTool } from "../../core/define-tool";
8 | import { requireAuth, requireOrganization } from "../../core/mesh-context";
9 | import {
10 | ListSubscriptionsInputSchema,
11 | ListSubscriptionsOutputSchema,
12 | } from "./schema";
13 |
14 | export const EVENT_SUBSCRIPTION_LIST = defineTool({
15 | name: "EVENT_SUBSCRIPTION_LIST",
16 | description:
17 | "List event subscriptions, optionally filtered by connection ID.",
18 |
19 | inputSchema: ListSubscriptionsInputSchema,
20 | outputSchema: ListSubscriptionsOutputSchema,
21 |
22 | handler: async (input, ctx) => {
23 | requireAuth(ctx);
24 | const organization = requireOrganization(ctx);
25 | await ctx.access.check();
26 |
27 | // List subscriptions
28 | const subscriptions = await ctx.eventBus.listSubscriptions(
29 | organization.id,
30 | input.connectionId,
31 | );
32 |
33 | return {
34 | subscriptions: subscriptions.map((sub) => ({
35 | id: sub.id,
36 | connectionId: sub.connectionId,
37 | eventType: sub.eventType,
38 | publisher: sub.publisher,
39 | filter: sub.filter,
40 | enabled: sub.enabled,
41 | createdAt: sub.createdAt,
42 | updatedAt: sub.updatedAt,
43 | })),
44 | };
45 | },
46 | });
47 |
--------------------------------------------------------------------------------
/apps/mesh/tsconfig.json:
--------------------------------------------------------------------------------
1 | {
2 | "compilerOptions": {
3 | // Language and Environment
4 | "target": "ESNext",
5 | "lib": ["ESNext", "DOM", "DOM.Iterable"],
6 | "module": "ESNext",
7 | "jsx": "react-jsx",
8 |
9 | // Module Resolution
10 | "moduleResolution": "bundler",
11 | "resolveJsonModule": true,
12 | "allowImportingTsExtensions": true,
13 | "noEmit": true,
14 |
15 | // Type Checking
16 | "strict": true,
17 | "noUnusedLocals": true,
18 | "noUnusedParameters": true,
19 | "noFallthroughCasesInSwitch": true,
20 | "noImplicitReturns": true,
21 | "skipLibCheck": true,
22 |
23 | // Interop Constraints
24 | "esModuleInterop": true,
25 | "allowSyntheticDefaultImports": true,
26 | "forceConsistentCasingInFileNames": true,
27 | "isolatedModules": true,
28 |
29 | // Best practices
30 | "noUncheckedIndexedAccess": true,
31 | "noImplicitOverride": true,
32 |
33 | // Some stricter flags (disabled by default)
34 | "noPropertyAccessFromIndexSignature": false,
35 |
36 | // Bun-specific
37 | "types": ["bun"],
38 | "allowJs": true,
39 |
40 | // Path Mapping
41 | "baseUrl": ".",
42 | "paths": {
43 | "@/*": ["./src/*"]
44 | }
45 | },
46 | "include": [
47 | "src/**/*",
48 | "**/*.test.ts",
49 | "**/*.spec.ts",
50 | "scripts/generate-migrations.ts"
51 | ],
52 | "exclude": ["node_modules", "dist", "data"]
53 | }
54 |
--------------------------------------------------------------------------------
/apps/mesh/public/logos/deco logo.svg:
--------------------------------------------------------------------------------
1 |
5 |
--------------------------------------------------------------------------------
/packages/ui/src/components/deco-chat-toggle-button.tsx:
--------------------------------------------------------------------------------
1 | import type { ReactNode } from "react";
2 | import { Button } from "./button.tsx";
3 | import { Icon } from "./icon.tsx";
4 | import { cn } from "../lib/utils.ts";
5 |
6 | interface DecoChatToggleButtonProps {
7 | onClick: () => void;
8 | disabled?: boolean;
9 | className?: string;
10 | children?: ReactNode;
11 | avatar?: string | ReactNode;
12 | }
13 |
14 | export function DecoChatToggleButton({
15 | onClick,
16 | disabled,
17 | className,
18 | children,
19 | avatar,
20 | }: DecoChatToggleButtonProps) {
21 | const defaultAvatar = (
22 |
23 |
38 |
40 | )}
41 | {children}
39 |
27 |
44 | );
45 | }
46 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/hooks/collections/use-llm.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * LLM Collection Hooks
3 | *
4 | * Provides React hooks for working with LLM models from remote connections
5 | * using React Query.
6 | */
7 |
8 | import type { ModelCollectionEntitySchema } from "@decocms/bindings/llm";
9 | import { z } from "zod";
10 | import { UNKNOWN_CONNECTION_ID, createToolCaller } from "../../../tools/client";
11 | import {
12 | useCollectionList,
13 | type UseCollectionListOptions,
14 | } from "../use-collections";
15 |
16 | // LLM type matching ModelSchema from @decocms/bindings
17 | export type LLM = z.infer
28 |
43 | {title}
29 |
30 | {viewMode && onViewModeChange && (
31 |
42 |
23 |
24 |
38 |
39 | {noPadding ? (
40 |
49 | );
50 | }
51 |
--------------------------------------------------------------------------------
/apps/docs/client/src/components/ui/Card.astro:
--------------------------------------------------------------------------------
1 | ---
2 | import { Icon } from "../atoms/Icon";
3 |
4 | interface Props {
5 | title: string;
6 | description?: string;
7 | icon?: string;
8 | layout?: "horizontal" | "vertical";
9 | action?: {
10 | label: string;
11 | href: string;
12 | };
13 | }
14 |
15 | const {
16 | title,
17 | description,
18 | icon = "Info",
19 | layout = "horizontal",
20 | action,
21 | } = Astro.props;
22 | ---
23 |
24 |
25 | {typeof title === "string" ? (
26 |
36 | {action ? {title}
27 | ) : (
28 | title
29 | )}
30 | {description ? (
31 |
32 | {description}
33 |
34 | ) : null}
35 | {action}
: null}
37 |
41 | {children}
42 |
43 | ) : (
44 |
45 | {children}
46 |
47 | )}
48 |
25 |
58 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/components/collections/collection-search.tsx:
--------------------------------------------------------------------------------
1 | import { Icon } from "@deco/ui/components/icon.tsx";
2 | import { Input } from "@deco/ui/components/input.tsx";
3 | import { cn } from "@deco/ui/lib/utils.ts";
4 |
5 | interface CollectionSearchProps {
6 | value: string;
7 | onChange: (value: string) => void;
8 | placeholder?: string;
9 | onKeyDown?: (e: React.KeyboardEvent
28 |
57 |
31 |
42 |
43 | {
44 | action && (
45 |
32 | {title}
33 | {
34 | description && (
35 |
39 |
40 | {description}
36 | ) 37 | } 38 |
46 |
50 | {action.label}
51 |
54 | )
55 | }
56 |
34 |
49 | );
50 | }
51 |
--------------------------------------------------------------------------------
/deploy/docker-compose.yml:
--------------------------------------------------------------------------------
1 | services:
2 | mesh:
3 | image: ${IMAGE_REPOSITORY:-ghcr.io/decocms/mesh/mesh}:${IMAGE_TAG:-latest}
4 | platform: linux/amd64
5 | container_name: deco-mcp-mesh
6 | restart: unless-stopped
7 | ports:
8 | - "${PORT:-3000}:3000"
9 | environment:
10 | # Basic configuration
11 | - NODE_ENV=${NODE_ENV:-production}
12 | - PORT=3000
13 | - HOST=0.0.0.0
14 |
15 | # Application URLs
16 | - BETTER_AUTH_URL=${BETTER_AUTH_URL:-http://localhost:3000}
17 | - BASE_URL=${BASE_URL:-http://localhost:3000}
18 |
19 | # Authentication secret (required)
20 | - BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET}
21 |
22 | # Database URL
23 | - DATABASE_URL=${DATABASE_URL:-/app/data/mesh.db}
24 | volumes:
25 | # Persistent volume for data (SQLite or other files)
26 | - mesh-data:/app/data
27 |
28 | # Auth config - mounts the JSON authentication configuration file
29 | # The file is mounted at /app/apps/mesh/auth-config.json
30 | # If the file doesn't exist locally, Docker Compose will fail to start
31 | - ./auth-config.json:/app/apps/mesh/auth-config.json:ro
32 | healthcheck:
33 | # Health check using curl (adjust if your image doesn't have curl)
34 | # Alternative: use wget or remove if not available
35 | test: ["CMD-SHELL", "curl -f http://localhost:3000/health || exit 1"]
36 | interval: 30s
37 | timeout: 5s
38 | retries: 3
39 | start_period: 30s
40 | # Security context
41 | user: "1001:1001"
42 |
43 | volumes:
44 | mesh-data:
45 | driver: local
46 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/connection/delete.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * COLLECTION_CONNECTIONS_DELETE Tool
3 | *
4 | * Delete a connection with collection binding compliance.
5 | */
6 |
7 | import {
8 | CollectionDeleteInputSchema,
9 | createCollectionDeleteOutputSchema,
10 | } from "@decocms/bindings/collections";
11 | import { defineTool } from "../../core/define-tool";
12 | import { requireAuth, requireOrganization } from "../../core/mesh-context";
13 | import { ConnectionEntitySchema } from "./schema";
14 |
15 | export const COLLECTION_CONNECTIONS_DELETE = defineTool({
16 | name: "COLLECTION_CONNECTIONS_DELETE",
17 | description: "Delete a connection",
18 |
19 | inputSchema: CollectionDeleteInputSchema,
20 | outputSchema: createCollectionDeleteOutputSchema(ConnectionEntitySchema),
21 |
22 | handler: async (input, ctx) => {
23 | // Require authentication
24 | requireAuth(ctx);
25 |
26 | // Require organization context
27 | const organization = requireOrganization(ctx);
28 |
29 | // Check authorization
30 | await ctx.access.check();
31 |
32 | // Fetch connection before deleting to return the entity
33 | const connection = await ctx.storage.connections.findById(input.id);
34 | if (!connection) {
35 | throw new Error(`Connection not found: ${input.id}`);
36 | }
37 |
38 | // Verify it belongs to the current organization
39 | if (connection.organization_id !== organization.id) {
40 | throw new Error("Connection not found in organization");
41 | }
42 |
43 | // Delete connection
44 | await ctx.storage.connections.delete(input.id);
45 |
46 | return {
47 | item: connection,
48 | };
49 | },
50 | });
51 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/monitoring/stats.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * MONITORING_STATS Tool
3 | *
4 | * Get aggregated statistics for monitoring logs.
5 | */
6 |
7 | import { requireOrganization } from "@/core/mesh-context";
8 | import { defineTool } from "../../core/define-tool";
9 | import { z } from "zod";
10 |
11 | export const MONITORING_STATS = defineTool({
12 | name: "MONITORING_STATS",
13 | description: "Get aggregated statistics for tool call monitoring",
14 | inputSchema: z.object({
15 | startDate: z
16 | .string()
17 | .datetime()
18 | .optional()
19 | .describe("Filter by start date (ISO 8601 datetime string)"),
20 | endDate: z
21 | .string()
22 | .datetime()
23 | .optional()
24 | .describe("Filter by end date (ISO 8601 datetime string)"),
25 | }),
26 | outputSchema: z.object({
27 | totalCalls: z.number().describe("Total number of tool calls"),
28 | errorRate: z.number().describe("Error rate as a decimal (0 to 1)"),
29 | avgDurationMs: z.number().describe("Average call duration in milliseconds"),
30 | errorRatePercent: z.string().describe("Error rate as a percentage string"),
31 | }),
32 | handler: async (input, ctx) => {
33 | const org = requireOrganization(ctx);
34 |
35 | const filters = {
36 | organizationId: org.id,
37 | startDate: input.startDate ? new Date(input.startDate) : undefined,
38 | endDate: input.endDate ? new Date(input.endDate) : undefined,
39 | };
40 |
41 | const stats = await ctx.storage.monitoring.getStats(filters);
42 |
43 | return {
44 | ...stats,
45 | errorRatePercent: (stats.errorRate * 100).toFixed(2),
46 | };
47 | },
48 | });
49 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/components/collections/collection-table-wrapper.tsx:
--------------------------------------------------------------------------------
1 | import { CollectionTable } from "@deco/ui/components/collection-table.tsx";
2 | import type { TableColumn } from "@deco/ui/components/collection-table.tsx";
3 | import type { ReactNode } from "react";
4 |
5 | interface CollectionTableWrapperProps
35 |
48 |
29 |
31 | );
32 | }
33 |
34 | if (data.length === 0) {
35 | return (
36 | Loading...
30 |
37 | {emptyState || (
38 |
43 | );
44 | }
45 |
46 | return (
47 |
39 | No items found
40 |
41 | )}
42 |
48 |
57 | );
58 | }
59 |
--------------------------------------------------------------------------------
/packages/ui/src/components/radio-group.tsx:
--------------------------------------------------------------------------------
1 | "use client";
2 |
3 | import type * as React from "react";
4 | import * as RadioGroupPrimitive from "@radix-ui/react-radio-group";
5 | import { CircleIcon } from "lucide-react";
6 |
7 | import { cn } from "@deco/ui/lib/utils.ts";
8 |
9 | function RadioGroup({
10 | className,
11 | ...props
12 | }: React.ComponentProps
44 |
50 | );
51 |
52 | if (icon && !imageError) {
53 | return (
54 |
30 |
61 | );
62 | }
63 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/organization/update.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * ORGANIZATION_UPDATE Tool
3 | *
4 | * Update an existing organization
5 | */
6 |
7 | import { z } from "zod";
8 | import { defineTool } from "../../core/define-tool";
9 | import { requireAuth } from "../../core/mesh-context";
10 |
11 | export const ORGANIZATION_UPDATE = defineTool({
12 | name: "ORGANIZATION_UPDATE",
13 | description: "Update an existing organization",
14 |
15 | inputSchema: z.object({
16 | id: z.string(),
17 | slug: z
18 | .string()
19 | .min(1)
20 | .max(50)
21 | .regex(/^[a-z0-9-]+$/)
22 | .optional(),
23 | name: z.string().min(1).max(255).optional(),
24 | description: z.string().optional(),
25 | }),
26 |
27 | outputSchema: z.object({
28 | id: z.string(),
29 | name: z.string(),
30 | slug: z.string(),
31 | logo: z.string().nullable().optional(),
32 | metadata: z.any().optional(),
33 | createdAt: z.union([z.date(), z.string()]),
34 | }),
35 |
36 | handler: async (input, ctx) => {
37 | // Require authentication
38 | requireAuth(ctx);
39 |
40 | // Check authorization
41 | await ctx.access.check();
42 |
43 | // Build update data
44 | const updateData: Record
31 | {avatar && (
32 |
37 | )}
38 |
45 |
39 | {name}
40 | {subtitle && (
41 |
44 | {subtitle}
42 | )}
43 |
46 | {actions}
47 | {onClose && (
48 |
58 | )}
59 |
60 |
22 | {children}
23 |
24 | );
25 | }
26 |
27 | function AppTopbarLeft({ children, className }: AppTopbarSlotProps) {
28 | return (
29 | {children}
30 | );
31 | }
32 |
33 | function AppTopbarRight({ children, className }: AppTopbarSlotProps) {
34 | return (
35 | {children}
36 | );
37 | }
38 |
39 | function AppTopbarSkeleton() {
40 | return (
41 |
42 |
50 | );
51 | }
52 |
53 | export const AppTopbar = Object.assign(AppTopbarRoot, {
54 | Left: AppTopbarLeft,
55 | Right: AppTopbarRight,
56 | Skeleton: AppTopbarSkeleton,
57 | });
58 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/registry.test.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * Registry Tests
3 | *
4 | * Ensures registry.ts stays in sync with index.ts
5 | */
6 |
7 | import { describe, expect, it } from "bun:test";
8 | import { ALL_TOOLS, type ToolNameFromTools } from "./index";
9 | import { MANAGEMENT_TOOLS, type ToolName } from "./registry";
10 |
11 | describe("Tool Registry Sync", () => {
12 | it("should have MANAGEMENT_TOOLS entries for all tools in ALL_TOOLS", () => {
13 | const allToolNames = ALL_TOOLS.map((t) => t.name);
14 | const registryToolNames = MANAGEMENT_TOOLS.map((t) => t.name);
15 |
16 | // Check ALL_TOOLS → MANAGEMENT_TOOLS
17 | for (const toolName of allToolNames) {
18 | expect(
19 | registryToolNames,
20 | `Missing "${toolName}" in MANAGEMENT_TOOLS (registry.ts). Add it!`,
21 | ).toContain(toolName);
22 | }
23 |
24 | // Check MANAGEMENT_TOOLS → ALL_TOOLS
25 | for (const toolName of registryToolNames) {
26 | expect(
27 | allToolNames,
28 | `Extra "${toolName}" in MANAGEMENT_TOOLS (registry.ts) not in ALL_TOOLS (index.ts). Remove it!`,
29 | ).toContain(toolName);
30 | }
31 | });
32 |
33 | it("should have matching ToolName types", () => {
34 | // This is a compile-time check - if the types diverge, this won't compile
35 | const _checkToolNameCompat: ToolName = "" as ToolNameFromTools;
36 | const _checkToolNameFromToolsCompat: ToolNameFromTools = "" as ToolName;
37 | // Mark as intentionally unused for type checking only
38 | void _checkToolNameCompat;
39 | void _checkToolNameFromToolsCompat;
40 |
41 | // Runtime check for same length
42 | const allToolNames = ALL_TOOLS.map((t) => t.name);
43 | const registryToolNames = MANAGEMENT_TOOLS.map((t) => t.name);
44 | expect(registryToolNames.length).toBe(allToolNames.length);
45 | });
46 | });
47 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/apiKeys/create.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * API_KEY_CREATE Tool
3 | *
4 | * Create a new API key with specified permissions.
5 | * IMPORTANT: The key value is only returned here and cannot be retrieved later.
6 | */
7 |
8 | import { defineTool } from "../../core/define-tool";
9 | import { requireAuth } from "../../core/mesh-context";
10 | import { ApiKeyCreateInputSchema, ApiKeyCreateOutputSchema } from "./schema";
11 |
12 | export const API_KEY_CREATE = defineTool({
13 | name: "API_KEY_CREATE",
14 | description:
15 | "Create a new API key with specified permissions. The key value is only returned once - store it securely!",
16 |
17 | inputSchema: ApiKeyCreateInputSchema,
18 | outputSchema: ApiKeyCreateOutputSchema,
19 |
20 | handler: async (input, ctx) => {
21 | // Require authentication - users must be logged in to create API keys
22 | requireAuth(ctx);
23 |
24 | // Check authorization for this tool
25 | await ctx.access.check();
26 |
27 | // Create the API key via Better Auth with organization context
28 | // This ensures the API key is scoped to the current organization
29 | const result = await ctx.boundAuth.apiKey.create({
30 | name: input.name,
31 | permissions: input.permissions,
32 | expiresIn: input.expiresIn,
33 | metadata: {
34 | ...input.metadata,
35 | organization: ctx.organization, // Embed org context for multi-tenancy
36 | },
37 | });
38 |
39 | // Return the created key with its value (only time it's visible)
40 | return {
41 | id: result.id,
42 | name: result.name ?? input.name, // Fallback to input name if null
43 | key: result.key, // This is the only time the key value is returned!
44 | permissions: result.permissions ?? {},
45 | expiresAt: result.expiresAt ?? null,
46 | createdAt: result.createdAt,
47 | };
48 | },
49 | });
50 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/organization/member-list.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * ORGANIZATION_MEMBER_LIST Tool
3 | *
4 | * List all members in an organization
5 | */
6 |
7 | import { z } from "zod";
8 | import { defineTool } from "../../core/define-tool";
9 | import { requireAuth } from "../../core/mesh-context";
10 |
11 | export const ORGANIZATION_MEMBER_LIST = defineTool({
12 | name: "ORGANIZATION_MEMBER_LIST",
13 | description: "List all members in an organization",
14 |
15 | inputSchema: z.object({
16 | limit: z.number().optional(),
17 | offset: z.number().optional(),
18 | }),
19 |
20 | outputSchema: z.object({
21 | members: z.array(
22 | z.object({
23 | id: z.string(),
24 | organizationId: z.string(),
25 | userId: z.string(),
26 | role: z.string(),
27 | createdAt: z.union([z.date(), z.string()]),
28 | user: z
29 | .object({
30 | id: z.string(),
31 | name: z.string(),
32 | email: z.string(),
33 | image: z.string().optional(),
34 | })
35 | .optional(),
36 | }),
37 | ),
38 | }),
39 |
40 | handler: async (input, ctx) => {
41 | // Require authentication
42 | requireAuth(ctx);
43 |
44 | // Check authorization
45 | await ctx.access.check();
46 | // Use active organization if not specified
47 | const organizationId = ctx.organization?.id;
48 | if (!organizationId) {
49 | throw new Error(
50 | "Organization ID required (no active organization in context)",
51 | );
52 | }
53 |
54 | // List members via Better Auth
55 | const result = await ctx.boundAuth.organization.listMembers({
56 | organizationId,
57 | limit: input.limit,
58 | offset: input.offset,
59 | });
60 |
61 | return {
62 | members: Array.isArray(result) ? result : [],
63 | };
64 | },
65 | });
66 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/eventbus/subscribe.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * EVENT_SUBSCRIBE Tool
3 | *
4 | * Creates a subscription to receive events.
5 | * The subscriber connection ID is automatically set from the caller's auth token.
6 | */
7 |
8 | import { defineTool } from "../../core/define-tool";
9 | import { requireAuth, requireOrganization } from "../../core/mesh-context";
10 | import { SubscribeInputSchema, SubscribeOutputSchema } from "./schema";
11 |
12 | export const EVENT_SUBSCRIBE = defineTool({
13 | name: "EVENT_SUBSCRIBE",
14 | description:
15 | "Subscribe to events of a specific type. The subscriber is automatically set to the caller's connection.",
16 |
17 | inputSchema: SubscribeInputSchema,
18 | outputSchema: SubscribeOutputSchema,
19 |
20 | handler: async (input, ctx) => {
21 | requireAuth(ctx);
22 | const organization = requireOrganization(ctx);
23 | await ctx.access.check();
24 |
25 | // Get the subscriber connection ID from the caller's token
26 | const connectionId = ctx.connectionId;
27 | if (!connectionId) {
28 | throw new Error(
29 | "Connection ID required to subscribe. Use a connection-scoped token.",
30 | );
31 | }
32 | // Create the subscription
33 | const subscription = await ctx.eventBus.subscribe(organization.id, {
34 | connectionId,
35 | eventType: input.eventType,
36 | publisher: input.publisher,
37 | filter: input.filter,
38 | });
39 |
40 | return {
41 | subscription: {
42 | id: subscription.id,
43 | connectionId: subscription.connectionId,
44 | eventType: subscription.eventType,
45 | publisher: subscription.publisher,
46 | filter: subscription.filter,
47 | enabled: subscription.enabled,
48 | createdAt: subscription.createdAt,
49 | updatedAt: subscription.updatedAt,
50 | },
51 | };
52 | },
53 | });
54 |
--------------------------------------------------------------------------------
/apps/mesh/src/tools/eventbus/unsubscribe.ts:
--------------------------------------------------------------------------------
1 | /**
2 | * EVENT_UNSUBSCRIBE Tool
3 | *
4 | * Removes a subscription.
5 | */
6 |
7 | import { defineTool } from "../../core/define-tool";
8 | import { requireAuth, requireOrganization } from "../../core/mesh-context";
9 | import { UnsubscribeInputSchema, UnsubscribeOutputSchema } from "./schema";
10 |
11 | export const EVENT_UNSUBSCRIBE = defineTool({
12 | name: "EVENT_UNSUBSCRIBE",
13 | description: "Unsubscribe from events by removing a subscription.",
14 |
15 | inputSchema: UnsubscribeInputSchema,
16 | outputSchema: UnsubscribeOutputSchema,
17 |
18 | handler: async (input, ctx) => {
19 | requireAuth(ctx);
20 | const organization = requireOrganization(ctx);
21 | await ctx.access.check();
22 |
23 | // Get the caller's connection ID - required for ownership verification
24 | const connectionId = ctx.connectionId;
25 | if (!connectionId) {
26 | throw new Error(
27 | "Connection ID required to unsubscribe. Use a connection-scoped token.",
28 | );
29 | }
30 |
31 | // Verify the subscription exists and belongs to the caller's connection
32 | const subscription = await ctx.eventBus.getSubscription(
33 | organization.id,
34 | input.subscriptionId,
35 | );
36 |
37 | if (!subscription) {
38 | throw new Error(`Subscription not found: ${input.subscriptionId}`);
39 | }
40 |
41 | if (subscription.connectionId !== connectionId) {
42 | throw new Error(
43 | "Cannot unsubscribe from a subscription owned by another connection",
44 | );
45 | }
46 |
47 | // Remove the subscription
48 | const result = await ctx.eventBus.unsubscribe(
49 | organization.id,
50 | input.subscriptionId,
51 | );
52 |
53 | return {
54 | success: result.success,
55 | subscriptionId: input.subscriptionId,
56 | };
57 | },
58 | });
59 |
--------------------------------------------------------------------------------
/apps/mesh/src/web/components/error-boundary.tsx:
--------------------------------------------------------------------------------
1 | import { Component, type ErrorInfo, type ReactNode } from "react";
2 | import { Button } from "@deco/ui/components/button.tsx";
3 | import { AlertTriangle } from "lucide-react";
4 |
5 | interface Props {
6 | children: ReactNode;
7 | fallback?: ReactNode;
8 | }
9 |
10 | interface State {
11 | hasError: boolean;
12 | error: Error | null;
13 | }
14 |
15 | export class ErrorBoundary extends Component
43 |
44 |
45 |
46 |
47 |
48 |
49 |
37 |
53 | );
54 | }
55 |
56 | return this.props.children;
57 | }
58 | }
59 |
--------------------------------------------------------------------------------
38 |
40 |
41 |
46 |
52 | Something went wrong
42 |43 | {this.state.error?.message || "An unexpected error occurred"} 44 |
45 |